Branch: refs/heads/2.0.0
Home:
https://github.com/tribe29/checkmk
Commit: 8ec54cd0db16e39060fd8f29cee889fed785f3b2
https://github.com/tribe29/checkmk/commit/8ec54cd0db16e39060fd8f29cee889fed…
Author: Moritz Kiemer <moritz.kiemer(a)tribe29.com>
Date: 2022-10-20 (Thu, 20 Oct 2022)
Changed paths:
A .werks/14650
M agents/check_mk_agent.aix
M agents/check_mk_agent.linux
M agents/check_mk_agent.openwrt
M agents/check_mk_agent.solaris
Log Message:
-----------
14650 FIX mk_job: No longer mount volumes on monitored hosts
We recently observed problems on Checkmk appliances caused by the agent mounting volumes.
This was in turn caused by the section responsible to output the statistics created by the
<tt>mk-job</tt> wrapper.
For every existing <tt>/var/lib/check_mk_agent/job/[USER]</tt> folder, the
agent started a login shell for <i>USER</i>.
This in turn made systemd automatically mount a volume under certain circumstances.
The agents use of <tt>su</tt> was a measure to prevent symlink and hardlink
attacks -- this is now done differently, without the use of <tt>su</tt>.
Change-Id: I8e415653db598451b487b6c784d0ad5284e8bde1